Traffic Trace Info
DumpFile: 201110301400.dump
FileSize: 2792.35MB
Id: 201110301400
StartTime: Sun Oct 30 14:00:00 2011
EndTime: Sun Oct 30 14:15:00 2011
TotalTime: 899.53 seconds
TotalCapSize: -1901.82MB CapLen: 96 bytes
# of packets: 39200988 (22302.20MB)
AvgRate: 207.94Mbps stddev:56.60M
IP flow (unique src/dst pair) Information
# of flows: 878975 (avg. 44.60 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.9% 2.2% 1.9% 1.7% 1.5% 1.1% 1.1% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 408123
Top 10 bandwidth usage (bytes/total in %):
28.6% 10.1% 9.3% 6.8% 4.2% 4.0% 3.4% 3.2% 2.3% 2.1%
# of IPv6 addresses: 3587
Top 10 bandwidth usage (bytes/total in %):
58.7% 58.7% 9.6% 8.6% 8.3% 7.1% 5.1% 5.1% 2.1% 2.0%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201110301400.pktlen.png)
detailed numbers
[ 32- 63]: 12807374
[ 64- 127]: 9705283
[ 128- 255]: 1145310
[ 256- 511]: 635995
[ 512- 1023]: 598998
[ 1024- 2047]: 14308028
Protocol Breakdown
![[protocol breakdown chart]](201110301400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 39200988 (100.00%) 23385549577 (100.00%) 596.56
ip 39014955 ( 99.53%) 23235575280 ( 99.36%) 595.56
tcp 33588005 ( 85.68%) 21064643908 ( 90.08%) 627.15
http(s) 10325139 ( 26.34%) 13963179556 ( 59.71%) 1352.35
http(c) 5456603 ( 13.92%) 1206952807 ( 5.16%) 221.19
squid 182015 ( 0.46%) 111216706 ( 0.48%) 611.03
smtp 59712 ( 0.15%) 11669755 ( 0.05%) 195.43
nntp 3 ( 0.00%) 194 ( 0.00%) 64.67
ftp 12511 ( 0.03%) 1066500 ( 0.00%) 85.24
pop3 1195 ( 0.00%) 222364 ( 0.00%) 186.08
imap 1402 ( 0.00%) 126312 ( 0.00%) 90.09
telnet 2039 ( 0.01%) 196425 ( 0.00%) 96.33
ssh 9512 ( 0.02%) 1931937 ( 0.01%) 203.11
dns 39372 ( 0.10%) 4589170 ( 0.02%) 116.56
bgp 614 ( 0.00%) 111825 ( 0.00%) 182.13
napster 475 ( 0.00%) 34911 ( 0.00%) 73.50
realaud 142 ( 0.00%) 9779 ( 0.00%) 68.87
rtsp 15071 ( 0.04%) 19630731 ( 0.08%) 1302.55
icecast 6922 ( 0.02%) 1531055 ( 0.01%) 221.19
hotline 118 ( 0.00%) 7783 ( 0.00%) 65.96
other 17475160 ( 44.58%) 5742166098 ( 24.55%) 328.59
udp 3484309 ( 8.89%) 1213363020 ( 5.19%) 348.24
dns 330583 ( 0.84%) 78627272 ( 0.34%) 237.84
realaud 11 ( 0.00%) 885 ( 0.00%) 80.45
halflif 658 ( 0.00%) 40049 ( 0.00%) 60.86
starcra 197 ( 0.00%) 28217 ( 0.00%) 143.23
everque 284 ( 0.00%) 62354 ( 0.00%) 219.56
unreal 56 ( 0.00%) 5475 ( 0.00%) 97.77
quake 7 ( 0.00%) 674 ( 0.00%) 96.29
cuseeme 3 ( 0.00%) 259 ( 0.00%) 86.33
other 3151712 ( 8.04%) 1134511091 ( 4.85%) 359.97
icmp 526730 ( 1.34%) 104964965 ( 0.45%) 199.28
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1062 ( 0.00%) 342852 ( 0.00%) 322.84
ip6 1401513 ( 3.58%) 849209429 ( 3.63%) 605.92
other 13151 ( 0.03%) 3031836 ( 0.01%) 230.54
frag 2092 ( 0.01%) 1724690 ( 0.01%) 824.42
ip6 186031 ( 0.47%) 149974177 ( 0.64%) 806.18
tcp6 125856 ( 0.32%) 133313792 ( 0.57%) 1059.26
http(s) 22768 ( 0.06%) 27775571 ( 0.12%) 1219.94
http(c) 22923 ( 0.06%) 2192489 ( 0.01%) 95.65
smtp 173 ( 0.00%) 155429 ( 0.00%) 898.43
ftp 26 ( 0.00%) 2313 ( 0.00%) 88.96
pop3 11 ( 0.00%) 977 ( 0.00%) 88.82
imap 28 ( 0.00%) 2678 ( 0.00%) 95.64
dns 620 ( 0.00%) 107043 ( 0.00%) 172.65
bgp 85 ( 0.00%) 12182 ( 0.00%) 143.32
other 79222 ( 0.20%) 103065110 ( 0.44%) 1300.97
udp6 40532 ( 0.10%) 12896924 ( 0.06%) 318.19
dns 34494 ( 0.09%) 9617522 ( 0.04%) 278.82
starcra 15 ( 0.00%) 1494 ( 0.00%) 99.60
everque 1 ( 0.00%) 102 ( 0.00%) 102.00
other 6022 ( 0.02%) 3277806 ( 0.01%) 544.31
icmp6 18539 ( 0.05%) 2943372 ( 0.01%) 158.77
ip6 85 ( 0.00%) 11530 ( 0.00%) 135.65
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 989 ( 0.00%) 804479 ( 0.00%) 813.43
tcpdump file: 201110301400.dump.gz (967.60 MB)